All posts in Software Update Management

Why You Should Disable Automatic Updates

A perfect example of why you should disable automatic updates using group policy, script, compliance settings or any other means at your disposal when using Configuration Manager for Software Updates (aka patching). Note this doesn’t mean disabling the Windows Update service, it means as stated, disable Automatic Updates. Read more…

WSUS Cleanup for ConfigMgr

Since ConfigMgr 2007 was released, the recommendation and firm statement from Microsoft has been to not perform any administration within a ConfigMgr integrated WSUS instance. In particular, performing approvals or declines was something you definitely should not do. Over the past year, two issues have cropped up to change this stance. Read more…

Notes on The Software Update Scan Cycle

Most of the below information is cobbled together from a couple of TechNet pages, a blog post or two, presentations I’ve seen over the years, conversations I’ve had with others, forum posts and experience — there’s just no one definitive source with a product as big as ConfigMgr that also relies on another full product in this case. And of course, there are always gaps (and sometimes errors) in the actual public documentation.  Read more…

Windows Update – What Is It Good For?

As is sometimes the case, this blog post is inspired by me being wrong or making an inaccurate statement (and then doing a bunch of research). This time, the statement was about what updates are released on “Patch Tuesday”. Read more…

Group Policy - Configure Automatic Updates

ConfigMgr Software Update Management and Group Policy (part 2)

This post is a continuation of my previous post: ConfigMgr Software Update Management and Group Policy.

So how do the rest of the settings in the Windows Updates Group Policy section affect Software Updates in ConfigMgr? Read more…

Windows Update Agent Notification

ConfigMgr Software Update Management and Group Policy

There is definitely a lot of confusion about how Group Policies interact with, control, and affect Software Update Management (SUM) on ConfigMgr clients. At the outset of this post (or series of posts), I don’t even know exactly what’s going to happen with some of the different settings and combinations that I’m going to try and then document. Read more…

Setup Windows and ConfigMgr Task

Build and Capture and Software Updates

A problem that crops up on the forums every now and then in addition to causing me to pull out some hair is deploying updates during a Build and Capture Task Sequence (TS). There are actually two problems that manifest themselves during a Build and Capture that don’t normally occur and both are caused because the client system is not part of the domain during the TS. Read more…